Method and system for intelligent many-to-many service routing over EPP

• US 8,856,344 B2
• Filed: 03/15/2013
• Issued: 10/07/2014
• Est. Priority Date: 08/18/2009
• Status: Active Grant

• Current Assignee: VeriSign, Inc.
• Original Assignee: VeriSign, Inc.
• Inventors: Gould, James, Anderson, Marc, Jain, Mahendra
• Primary Examiner(s): Eskandarnia, Arvin
• Application Number:
  US13/835,674
• Publication Number:
  US 20130204838A1
• Time in Patent Office: 571 Days
• Field of Search: 709/226
• US Class Current: 709/226
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/5041 characterised by the time relationship between creation and deployment of a service
• CPC Class Codes: H04L 61/302 Administrative registration, e.g. for domain names at internet corporation for assigned names and numbers [ICANN]
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

Method and system for routing EPP requests over a network are provided. A routing system includes multiple frontend service interfaces, one or more gateways, a management server, and a backend service platform that provides multiple application services. The frontend service interfaces are addressable using virtual IP addresses (“VIP”) and can be provided by the gateways. The routing system defines a many-to-many mapping between the frontend service interfaces and a set of services provided by the backend service platform. A requestor can send a request over EPP to a targeted service interface to access one or more backend services, by sending the request to a target IP or domain name that corresponds to a VIP associated with the targeted service interface. Using the many-to-many mapping and the VIP of the targeted service interface, the routing system can identify backend services sought by the request and provide the requestor with access to the backend services.

Claims

1. A computer-implemented method for routing requests received using Extensible Provisioning Protocol (EPP) to a plurality of services, the method comprising:

receiving, at a gateway via the EPP from a requestor, a request to access a service from among the plurality of services, the gateway providing a plurality of addressable service interfaces, wherein the request is directed to a target service interface of the plurality of addressable service interfaces via an address associated with the target service interface;

analyzing the request to determine the address associated with the target service interface;

identifying the service sought by the request based on information in a routing table corresponding to the address associated with the target service interface, wherein the routing table includes a many-to-many mapping between the plurality of service interfaces and the plurality of services; and

routing, by the gateway, the request to the service thereby providing the requestor with access to the service.

2. The computer-implemented method of claim 1, further comprising:

determining a current version of the service based on the information in the routing table; and

routing the request to the current version of the service.

3. The computer-implemented method of claim 1, further comprising:

determining a current version of the service based on the information in the routing table; and

routing the request to a different version of the service.

4. The computer-implemented method of claim 1, further comprising:

determining an operational state of the service based on the information in the routing table; and

routing the request to the service based on the operational state of the service.

5. The computer-implemented method of claim 1, further comprising:

determining an operational state of the service based on the information in the routing table; and

routing the request to the service based on the address associated with the target service interface and the operational state of the service.

6. The computer-implemented method of claim 1, wherein identifying the service further comprises:

providing to the requestor an EPP greeting that includes one or more services available to the requestor based on the address associated with the target service interface.

7. The computer-implemented method of claim 1, wherein identifying the service further comprises:

determining an authorization of the requestor to access the service sought by the request based on the address associated with the target service interface.

8. The computer-implemented method of claim 1, wherein identifying the service further comprises:

determining an access policy based on the address associated with the target service interface; and

determining an authorization of the requestor to access the service sought by the request based on the access policy.

9. The computer-implemented method of claim 1, further comprising:

defining the many-to-many mapping between the plurality of addressable service interfaces and the plurality of services, wherein the plurality of addressable service interfaces each has a unique address.

10. The computer-implemented method of claim 9, further comprising:

updating the routing table with the many-to-many mapping.

11. A system for routing requests received using Extensible Provisioning Protocol (EPP) to a plurality of services, comprising:

a processor; and

a memory communicatively coupled to the processor;

wherein the processor is configured to perform operations comprising;

receiving, at a gateway via the EPP from a requestor, a request to access a service from among the plurality of services, the gateway providing a plurality of addressable service interfaces, the request being directed to a target service interface of the plurality of addressable service interfaces via an address associated with the target service interface;

analyzing the request to determine the address associated with the target service interface;

identifying the service sought by the request based on information in a routing table corresponding to the address associated with the target service interface, wherein the routing table is stored in the memory and includes a many-to-many mapping between the plurality of service interfaces and the plurality of services; and

routing, by the gateway, the request to the service thereby providing the requestor with access to the service.

12. The system of claim 11, wherein the processor is further configured to perform operations comprising:

determining a current version of the service based on the information in the routing table; and

routing the request to the current version of the service.

13. The system of claim 11, wherein the processor is further configured to perform operations comprising:

determining a current version of the service based on the information in the routing table; and

routing the request to a different version of the service.

14. The system of claim 11, wherein the processor is further configured to perform operations comprising:

determining an operational state of the service based on the information in the routing table; and

routing the request to the service based on the operational state of the service.

15. The system of claim 11, wherein the processor is further configured to perform operations comprising:

determining an operational state of the service based on the information in the routing table; and

routing the request to the service based on the address associated with the target service interface and the operational state of the service.

16. The system of claim 11, wherein the processor is further configured to perform operations comprising:

providing to the requestor an EPP greeting that includes one or more services available to the requestor based on the address associated with the target service interface.

17. The system of claim 11, wherein the processor is further configured to perform operations comprising:

determining an authorization of the requestor to access the service sought by the request based on the address associated with the target service interface.

18. A non-transitory computer-readable storage medium including instructions which when executed by a processor within a device, causes the processor to execute a method for routing requests received using Extensible Provisioning Protocol (EPP) to a plurality of services, the method comprising:

receiving, at a gateway via the EPP from a requestor, a request to access a service from among the plurality of services, the gateway providing a plurality of addressable service interfaces, wherein the request is directed to a target service interface of the plurality of addressable service interfaces via an address associated with the target service interface;

analyzing the request to determine the address associated with the target service interface;

identifying the service sought by the request based on information in a routing table corresponding to the address associated with the target service interface, wherein the routing table includes a many-to-many mapping between the plurality of service interfaces and the plurality of services; and

routing, by the gateway, the request to the service thereby providing the requestor with access to the service.

19. The non-transitory computer-readable storage medium of claim 18, wherein the method further comprises:

determining a current version of the service based on the information in the routing table; and

routing the request to the current version of the service.

20. The non-transitory computer-readable storage medium of claim 18, wherein the method further comprises:

determining a current version of the service based on the information in the routing table; and

routing the request to a different version of the service.

21. The non-transitory computer-readable storage medium of claim 18, wherein the method further comprises:

determining an operational state of the service based on the information in the routing table; and

routing the request to the service based on the operational state of the service.

22. The non-transitory computer-readable storage medium of claim 18, wherein the method further comprises:

determining an operational state of the service based on the information in the routing table; and

routing the request to the service based on the address associated with the target service interface and the operational state of the service.

23. The non-transitory computer-readable storage medium of claim 18, wherein identifying the service further comprises:

providing to the requestor an EPP greeting that includes one or more services available to the requestor based on the address associated with the target service interface.

24. The non-transitory computer-readable storage medium of claim 18, wherein identifying the service further comprises:

determining an authorization of the requestor to access the service sought by the request based on the address associated with the target service interface.

25. The non-transitory computer-readable storage medium of claim 18, wherein identifying the service further comprises:

determining an access policy based on the address associated with the target service interface; and

determining an authorization of the requestor to access the service sought by the request based on the access policy.

26. The non-transitory computer-readable storage medium of claim 18, wherein the method further comprises:

defining the many-to-many mapping between the plurality of addressable service interfaces and the plurality of services, wherein the plurality of addressable service interfaces each has a unique address.

27. A computer-implemented method for routing requests received using Extensible Provisioning Protocol (EPP) to a plurality of services, the method comprising:

receiving, at a gateway via the EPP from a requestor, a request to access a service from among the plurality of services, the gateway providing a plurality of addressable service interfaces, wherein the request is directed to a target service interface of the plurality of addressable service interfaces via an address associated with the target service interface;

analyzing the request to determine the address associated with the target service interface;

identifying the service sought by the request based on information in a routing table associated with the address associated with the target service interface, wherein the routing table includes a many-to-many mapping between the plurality of addressable service interfaces and the plurality of services;

determining an operational state of the service based on the information in the routing table; and

routing the request to the service based on the associated with the target service interface and the operational state of the service, thereby providing the requestor with access to the service.